darkcomet | 3947007db1f447df87934237b0393480558b906ce696a18ea36ef9c9b323b691 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...e6.exe

windows7-x64

JaffaCakes...e6.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_07e0e88f74ca552229bcf27fba0103e6
Size

772KB
Sample

250121-125tdatphn
MD5

07e0e88f74ca552229bcf27fba0103e6
SHA1

23e6152650fc5f418ae48d72e8e4c67748b7edf2
SHA256

3947007db1f447df87934237b0393480558b906ce696a18ea36ef9c9b323b691
SHA512

56f38aa8b912e3b0d32f9e4bfa1d5787425e93355d70554750ca1bbead2032705003dcced19cbce070b6da6bbb6d1e6e737a66afc2686c2d4cd0b4567ddbdb2d
SSDEEP

12288:Cab1PMmvsD5jqrGfruP1N1j2i3hLJ4LdEDSYW30RKla9JMV6pZW:f1JJiTmN1yi3hLJM1hna9lZW

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_07e0e88f74ca552229bcf27fba0103e6.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_07e0e88f74ca552229bcf27fba0103e6.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_07e0e88f74ca552229bcf27fba0103e6
- Size
  
  772KB
- MD5
  
  07e0e88f74ca552229bcf27fba0103e6
- SHA1
  
  23e6152650fc5f418ae48d72e8e4c67748b7edf2
- SHA256
  
  3947007db1f447df87934237b0393480558b906ce696a18ea36ef9c9b323b691
- SHA512
  
  56f38aa8b912e3b0d32f9e4bfa1d5787425e93355d70554750ca1bbead2032705003dcced19cbce070b6da6bbb6d1e6e737a66afc2686c2d4cd0b4567ddbdb2d
- SSDEEP
  
  12288:Cab1PMmvsD5jqrGfruP1N1j2i3hLJ4LdEDSYW30RKla9JMV6pZW:f1JJiTmN1yi3hLJM1hna9lZW
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2025

Terms | Privacy